[ 102.654701][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.662435][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.671171][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.679180][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.698824][ T44] veth1_macvtap: left promiscuous mode [ 102.704425][ T44] veth0_macvtap: left promiscuous mode [ 102.710760][ T44] veth1_vlan: left promiscuous mode [ 102.716129][ T44] veth0_vlan: left promiscuous mode [ 103.136588][ T44] team0 (unregistering): Port device team_slave_1 removed [ 103.173261][ T44] team0 (unregistering): Port device team_slave_0 removed Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts. 2025/11/19 12:33:11 parsed 1 programs [ 128.951194][ T6161] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 132.530084][ T5148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.538964][ T5148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.547126][ T5148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.555643][ T5148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.563759][ T5148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.950870][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.957439][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.062929][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.071416][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.111126][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.119925][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.646568][ T6225] chnl_net:caif_netlink_parms(): no params data found [ 134.772807][ T6225] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.780207][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.787480][ T6225] bridge_slave_0: entered allmulticast mode [ 134.794666][ T6225] bridge_slave_0: entered promiscuous mode [ 134.803580][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.810839][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.818724][ T6225] bridge_slave_1: entered allmulticast mode [ 134.826372][ T6225] bridge_slave_1: entered promiscuous mode [ 134.873186][ T6225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.884608][ T6225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.912680][ T6225] team0: Port device team_slave_0 added [ 134.922021][ T6225] team0: Port device team_slave_1 added [ 134.951635][ T6225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.959097][ T6225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.985192][ T6225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.998189][ T6225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.005152][ T6225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.031407][ T6225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.081973][ T6225] hsr_slave_0: entered promiscuous mode [ 135.088234][ T6225] hsr_slave_1: entered promiscuous mode [ 135.549289][ T6225] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 135.561832][ T6225] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 135.576987][ T6225] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 135.590924][ T6225] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 135.701789][ T6225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.725954][ T6225] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.740838][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.748099][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.771055][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.778380][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.046602][ T6225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.106648][ T6225] veth0_vlan: entered promiscuous mode [ 136.123437][ T6225] veth1_vlan: entered promiscuous mode [ 136.166770][ T6225] veth0_macvtap: entered promiscuous mode [ 136.179991][ T6225] veth1_macvtap: entered promiscuous mode [ 136.204803][ T6225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.223410][ T6225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.242698][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.261953][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.290177][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.300311][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.482919][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.567618][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.648837][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.796272][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/11/19 12:33:24 executed programs: 0 [ 137.460272][ T5148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 137.471135][ T5148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.483851][ T5148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.492944][ T5148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 137.501677][ T5148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.760220][ T6311] chnl_net:caif_netlink_parms(): no params data found [ 137.876592][ T6311] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.884060][ T6311] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.891807][ T6311] bridge_slave_0: entered allmulticast mode [ 137.900411][ T6311] bridge_slave_0: entered promiscuous mode [ 137.913050][ T6311] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.920943][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.928577][ T6311] bridge_slave_1: entered allmulticast mode [ 137.936403][ T6311] bridge_slave_1: entered promiscuous mode [ 137.981876][ T6311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.996086][ T6311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.040552][ T6311] team0: Port device team_slave_0 added [ 138.049823][ T6311] team0: Port device team_slave_1 added [ 138.094177][ T6311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.101637][ T6311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.128605][ T6311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.142245][ T6311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.151140][ T6311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.178533][ T6311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.244961][ T6311] hsr_slave_0: entered promiscuous mode [ 138.252065][ T6311] hsr_slave_1: entered promiscuous mode [ 138.258495][ T6311] debugfs: 'hsr0' already exists in 'hsr' [ 138.264253][ T6311] Cannot create hsr debugfs directory [ 139.029318][ T36] bridge_slave_1: left allmulticast mode [ 139.035095][ T36] bridge_slave_1: left promiscuous mode [ 139.042912][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.055928][ T36] bridge_slave_0: left allmulticast mode [ 139.061991][ T36] bridge_slave_0: left promiscuous mode [ 139.068643][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.465526][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.482090][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.493278][ T36] bond0 (unregistering): Released all slaves [ 139.588925][ T5869] Bluetooth: hci0: command tx timeout [ 139.656158][ T36] hsr_slave_0: left promiscuous mode [ 139.666936][ T36] hsr_slave_1: left promiscuous mode [ 139.678631][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.686100][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.694234][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.701751][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.723285][ T36] veth1_macvtap: left promiscuous mode [ 139.729173][ T36] veth0_macvtap: left promiscuous mode [ 139.734849][ T36] veth1_vlan: left promiscuous mode [ 139.740505][ T36] veth0_vlan: left promiscuous mode [ 140.104156][ T36] team0 (unregistering): Port device team_slave_1 removed [ 140.131982][ T36] team0 (unregistering): Port device team_slave_0 removed [ 140.634261][ T6311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 140.651232][ T6311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 140.665812][ T6311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 140.678051][ T6311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 140.906316][ T6311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.960708][ T6311] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.985928][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.993131][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.013265][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.020481][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.312933][ T6311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.377208][ T6311] veth0_vlan: entered promiscuous mode [ 141.394235][ T6311] veth1_vlan: entered promiscuous mode [ 141.435800][ T6311] veth0_macvtap: entered promiscuous mode [ 141.448098][ T6311] veth1_macvtap: entered promiscuous mode [ 141.474651][ T6311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.493432][ T6311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.511317][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.520635][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.544274][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.557176][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.650641][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.665384][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.673144][ T5869] Bluetooth: hci0: command tx timeout [ 141.704163][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.713653][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/11/19 12:33:29 executed programs: 15 [ 143.752286][ T5869] Bluetooth: hci0: command tx timeout [ 145.827943][ T5869] Bluetooth: hci0: command tx timeout [ 194.390456][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.396882][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.831572][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.837988][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.027455][ T5148] Bluetooth: hci0: command 0x0406 tx timeout [ 291.027444][ T31] INFO: task kworker/u8:1:13 blocked for more than 143 seconds. [ 291.035138][ T31] Not tainted syzkaller #0 [ 291.040219][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.048979][ T31] task:kworker/u8:1 state:D stack:23336 pid:13 tgid:13 ppid:2 task_flags:0x4248160 flags:0x00080000 [ 291.061151][ T31] Workqueue: writeback wb_workfn (flush-8:0) [ 291.067319][ T31] Call Trace: [ 291.070619][ T31] [ 291.073568][ T31] __schedule+0x1190/0x5de0 [ 291.078151][ T31] ? blk_mq_flush_plug_list+0x145/0x600 [ 291.083741][ T31] ? __lock_acquire+0x622/0x1c90 [ 291.088798][ T31] ? __pfx___schedule+0x10/0x10 [ 291.093680][ T31] ? __blk_flush_plug+0x2f3/0x4b0 [ 291.098867][ T31] ? find_held_lock+0x2b/0x80 [ 291.104078][ T31] ? schedule+0x2d7/0x3a0 [ 291.108557][ T31] schedule+0xe7/0x3a0 [ 291.112648][ T31] io_schedule+0xbf/0x130 [ 291.116978][ T31] rq_qos_wait+0x22f/0x340 [ 291.121486][ T31] ? __pfx_rq_qos_wait+0x10/0x10 [ 291.126535][ T31] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 291.132392][ T31] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 291.137900][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 291.144046][ T31] ? bio_clone_blkg_association+0x77/0x90 [ 291.149874][ T31] wbt_wait+0x1b8/0x3a0 [ 291.154061][ T31] ? __pfx_wbt_wait+0x10/0x10 [ 291.158802][ T31] ? bio_submit_split_bioset+0x576/0xa70 [ 291.164463][ T31] ? bio_integrity_prep+0x1a6/0x990 [ 291.169763][ T31] ? __pfx_wbt_wait+0x10/0x10 [ 291.174915][ T31] __rq_qos_throttle+0x56/0xa0 [ 291.179834][ T31] blk_mq_submit_bio+0x28a1/0x3380 [ 291.184998][ T31] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 291.190619][ T31] __submit_bio+0x3cf/0x690 [ 291.195148][ T31] ? __lock_acquire+0x622/0x1c90 [ 291.200158][ T31] ? __pfx___submit_bio+0x10/0x10 [ 291.205643][ T31] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 291.211525][ T31] ? lock_acquire+0x179/0x350 [ 291.216233][ T31] ? submit_bio_noacct_nocheck+0x53d/0xc10 [ 291.222179][ T31] submit_bio_noacct_nocheck+0x53d/0xc10 [ 291.227907][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 291.234075][ T31] ? __pfx___might_resched+0x10/0x10 [ 291.239512][ T31] submit_bio_noacct+0x5bd/0x1f60 [ 291.244560][ T31] ext4_bio_write_folio+0x756/0x1dc0 [ 291.249916][ T31] mpage_process_page_bufs+0x47c/0x8d0 [ 291.255396][ T31] mpage_prepare_extent_to_map+0x79f/0x14d0 [ 291.261354][ T31] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 291.267904][ T31] ? kmem_cache_alloc_noprof+0x2a1/0x6e0 [ 291.273536][ T31] ? ext4_init_io_end+0x24/0x170 [ 291.278637][ T31] ext4_do_writepages+0xa11/0x3cf0 [ 291.283771][ T31] ? nsim_start_xmit+0x1c2/0xd70 [ 291.288830][ T31] ? __pfx_ext4_do_writepages+0x10/0x10 [ 291.294417][ T31] ? ext4_writepages+0x37a/0x7d0 [ 291.299423][ T31] ext4_writepages+0x37a/0x7d0 [ 291.304210][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 291.310015][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 291.315334][ T31] ? __dev_queue_xmit+0xaf1/0x4490 [ 291.320546][ T31] ? do_writepages+0x4b7/0x600 [ 291.325330][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 291.330892][ T31] do_writepages+0x27a/0x600 [ 291.335513][ T31] ? __pfx_do_writepages+0x10/0x10 [ 291.340736][ T31] ? reacquire_held_locks+0xcd/0x1f0 [ 291.346117][ T31] ? writeback_sb_inodes+0x3b0/0xfa0 [ 291.351585][ T31] __writeback_single_inode+0x160/0xfb0 [ 291.357168][ T31] ? __pfx___writeback_single_inode+0x10/0x10 [ 291.363400][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 291.368849][ T31] writeback_sb_inodes+0x60d/0xfa0 [ 291.374014][ T31] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 291.379705][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 291.384688][ T31] ? _raw_spin_unlock+0x28/0x50 [ 291.389601][ T31] ? move_expired_inodes+0x5a0/0x850 [ 291.394915][ T31] __writeback_inodes_wb+0xf8/0x2d0 [ 291.400205][ T31] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 291.406129][ T31] ? queue_io+0x3f6/0x520 [ 291.411252][ T31] wb_writeback+0x7f3/0xb70 [ 291.415799][ T31] ? __pfx_wb_writeback+0x10/0x10 [ 291.420876][ T31] ? get_nr_dirty_inodes+0x170/0x1e0 [ 291.426186][ T31] wb_workfn+0x8ca/0xbe0 [ 291.430645][ T31] ? try_to_wake_up+0x160/0x1870 [ 291.435609][ T31] ? __pfx_wb_workfn+0x10/0x10 [ 291.440537][ T31] ? rcu_is_watching+0x12/0xc0 [ 291.445327][ T31] process_one_work+0x9cf/0x1b70 [ 291.450353][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 291.455837][ T31] ? __pfx_process_one_work+0x10/0x10 [ 291.461342][ T31] ? assign_work+0x1a0/0x250 [ 291.465964][ T31] worker_thread+0x6c8/0xf10 [ 291.470651][ T31] ? __pfx_worker_thread+0x10/0x10 [ 291.475798][ T31] kthread+0x3c5/0x780 [ 291.480013][ T31] ? __pfx_kthread+0x10/0x10 [ 291.484630][ T31] ? rcu_is_watching+0x12/0xc0 [ 291.489503][ T31] ? __pfx_kthread+0x10/0x10 [ 291.494123][ T31] ret_from_fork+0x675/0x7d0 [ 291.498792][ T31] ? __pfx_kthread+0x10/0x10 [ 291.503406][ T31] ret_from_fork_asm+0x1a/0x30 [ 291.508543][ T31] [ 291.511757][ T31] INFO: task syz.0.188:6785 blocked for more than 143 seconds. [ 291.520375][ T31] Not tainted syzkaller #0 [ 291.525321][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 291.537295][ T31] task:syz.0.188 state:D stack:28680 pid:6785 tgid:6785 ppid:6311 task_flags:0x440040 flags:0x00080002 [ 291.549450][ T31] Call Trace: [ 291.552739][ T31] [ 291.555662][ T31] __schedule+0x1190/0x5de0 [ 291.560225][ T31] ? save_trace+0x4e/0x380 [ 291.564679][ T31] ? __lock_acquire+0x622/0x1c90 [ 291.569857][ T31] ? __pfx___schedule+0x10/0x10 [ 291.574745][ T31] ? find_held_lock+0x2b/0x80 [ 291.579495][ T31] ? schedule+0x2d7/0x3a0 [ 291.583935][ T31] schedule+0xe7/0x3a0 [ 291.588063][ T31] io_schedule+0xbf/0x130 [ 291.592406][ T31] bit_wait_io+0x15/0xe0 [ 291.596694][ T31] __wait_on_bit+0x65/0x180 [ 291.601255][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 291.606215][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 291.611678][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 291.618403][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 291.624164][ T31] do_get_write_access+0x93d/0x1320 [ 291.629476][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 291.635473][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 291.641620][ T31] ext4_reserve_inode_write+0x1be/0x340 [ 291.647417][ T31] __ext4_mark_inode_dirty+0x197/0x870 [ 291.652915][ T31] ? rcu_is_watching+0x12/0xc0 [ 291.657725][ T31] ? kmem_cache_alloc_noprof+0x2a1/0x6e0 [ 291.663376][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 291.670187][ T31] ? rcu_is_watching+0x12/0xc0 [ 291.674983][ T31] ? trace_jbd2_handle_start+0x1a8/0x230 [ 291.680705][ T31] ? jbd2__journal_start+0xf6/0x6a0 [ 291.685920][ T31] ? __ext4_journal_start_sb+0x195/0x690 [ 291.691794][ T31] ? __ext4_journal_start_sb+0x19e/0x690 [ 291.697473][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 291.702409][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 291.707920][ T31] ext4_dirty_inode+0xd9/0x130 [ 291.712789][ T31] ? rcu_is_watching+0x12/0xc0 [ 291.717640][ T31] __mark_inode_dirty+0x1ee/0xe40 [ 291.722792][ T31] generic_update_time+0xcf/0xf0 [ 291.727802][ T31] file_update_time+0x17d/0x1c0 [ 291.732687][ T31] ext4_page_mkwrite+0x33d/0x1880 [ 291.737783][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 291.743264][ T31] ? __raw_spin_lock_init+0x3a/0x110 [ 291.748653][ T31] do_page_mkwrite+0x174/0x380 [ 291.753454][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 291.758965][ T31] do_pte_missing+0x29d/0x3ba0 [ 291.763761][ T31] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 291.769701][ T31] ? __pmd_alloc+0x64f/0x8b0 [ 291.774327][ T31] __handle_mm_fault+0x1556/0x2aa0 [ 291.779594][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 291.785080][ T31] ? lock_vma_under_rcu+0x176/0x530 [ 291.790336][ T31] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 291.795915][ T31] handle_mm_fault+0x589/0xd10 [ 291.800904][ T31] ? __pkru_allows_pkey+0x21/0xb0 [ 291.805955][ T31] do_user_addr_fault+0x60c/0x1370 [ 291.811119][ T31] ? rcu_is_watching+0x12/0xc0 [ 291.815898][ T31] exc_page_fault+0x64/0xc0 [ 291.820514][ T31] asm_exc_page_fault+0x26/0x30 [ 291.825556][ T31] RIP: 0033:0x7efec386547b [ 291.830107][ T31] RSP: 002b:00007fff15257e30 EFLAGS: 00010246 [ 291.836200][ T31] RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 291.844234][ T31] RDX: 0000001b2e120000 RSI: 0000000000040000 RDI: 00007efec3a98d50 [ 291.852306][ T31] RBP: 0000000000000000 R08: 0000000000000009 R09: 00007fff15257b75 [ 291.860338][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 291.868494][ T31] R13: 00000000000927c0 R14: 0000000000023d3c R15: 00007fff152580e0 [ 291.876505][ T31] [ 291.879594][ T31] [ 291.879594][ T31] Showing all locks held in the system: [ 291.887364][ T31] 4 locks held by kworker/u8:1/13: [ 291.892487][ T31] #0: ffff88801e6ad148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 291.903289][ T31] #1: ffffc90000127d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 291.915286][ T31] #2: ffff88814e51c0e0 (&type->s_umount_key#31){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 291.925972][ T31] #3: ffff88814e51eb98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x27a/0x600 [ 291.936374][ T31] 1 lock held by khungtaskd/31: [ 291.941337][ T31] #0: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 291.951289][ T31] 2 locks held by getty/5589: [ 291.955951][ T31] #0: ffff88814d7730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 291.965738][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 291.975921][ T31] 3 locks held by syz.0.188/6785: [ 291.981070][ T31] #0: ffff88805906ba88 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x117/0x530 [ 291.990439][ T31] #1: ffff88814e51c518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x174/0x380 [ 292.000049][ T31] #2: ffff88814e520950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 292.009715][ T31] 3 locks held by syz-executor/6786: [ 292.015003][ T31] #0: ffff88814e51c420 (sb_writers#4){.+.+}-{0:0}, at: filename_create+0x10e/0x4a0 [ 292.024583][ T31] #1: ffff8880765b6380 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1bb/0x4a0 [ 292.035402][ T31] #2: ffff88814e520950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 292.045077][ T31] [ 292.047802][ T31] ============================================= [ 292.047802][ T31] [ 292.056322][ T31] NMI backtrace for cpu 1 [ 292.056343][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 292.056360][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.056368][ T31] Call Trace: [ 292.056375][ T31] [ 292.056382][ T31] dump_stack_lvl+0x116/0x1f0 [ 292.056410][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 292.056432][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 292.056455][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 292.056478][ T31] watchdog+0xf3f/0x1170 [ 292.056495][ T31] ? rcu_is_watching+0x12/0xc0 [ 292.056510][ T31] ? __pfx_watchdog+0x10/0x10 [ 292.056522][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 292.056540][ T31] ? __kthread_parkme+0x19e/0x250 [ 292.056559][ T31] ? __pfx_watchdog+0x10/0x10 [ 292.056572][ T31] kthread+0x3c5/0x780 [ 292.056592][ T31] ? __pfx_kthread+0x10/0x10 [ 292.056612][ T31] ? rcu_is_watching+0x12/0xc0 [ 292.056627][ T31] ? __pfx_kthread+0x10/0x10 [ 292.056647][ T31] ret_from_fork+0x675/0x7d0 [ 292.056667][ T31] ? __pfx_kthread+0x10/0x10 [ 292.056691][ T31] ret_from_fork_asm+0x1a/0x30 [ 292.056720][ T31] [ 292.056725][ T31] Sending NMI from CPU 1 to CPUs 0: [ 292.177515][ C0] NMI backtrace for cpu 0 [ 292.177533][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 292.177560][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.177574][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x8/0x20 [ 292.177619][ C0] Code: 00 00 00 e9 2a fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <48> 89 f2 48 89 fe bf 07 00 00 00 e9 f8 fd ff ff 0f 1f 84 00 00 00 [ 292.177641][ C0] RSP: 0018:ffffffff8e007d30 EFLAGS: 00000046 [ 292.177659][ C0] RAX: dffffc0000000000 RBX: ffff8880b84285e0 RCX: ffffffff81ad654a [ 292.177680][ C0] RDX: 1ffff110170850c8 RSI: 00000044057f3980 RDI: 7fffffffffffffff [ 292.177696][ C0] RBP: 1ffffffff1c00faf R08: 0000000000000006 R09: 0000004c3ebba780 [ 292.177711][ C0] R10: 00000044057f3980 R11: 0000000000000001 R12: 00000044057f3980 [ 292.177725][ C0] R13: 7fffffffffffffff R14: 00000044057f3980 R15: 0000000000000000 [ 292.177740][ C0] FS: 0000000000000000(0000) GS:ffff888124a0d000(0000) knlGS:0000000000000000 [ 292.177762][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.177777][ C0] CR2: 000055d8f218d460 CR3: 000000000e182000 CR4: 00000000003526f0 [ 292.177792][ C0] Call Trace: [ 292.177800][ C0] [ 292.177808][ C0] tick_nohz_idle_stop_tick+0x65a/0xef0 [ 292.177842][ C0] ? __pfx_tick_nohz_idle_stop_tick+0x10/0x10 [ 292.177872][ C0] ? __pfx_tsc_verify_tsc_adjust+0x10/0x10 [ 292.177906][ C0] ? ct_kernel_enter_state+0x12/0x60 [ 292.177940][ C0] do_idle+0x388/0x500 [ 292.177964][ C0] ? __pfx_do_idle+0x10/0x10 [ 292.177987][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 292.178027][ C0] cpu_startup_entry+0x4f/0x60 [ 292.178050][ C0] rest_init+0x16b/0x2b0 [ 292.178084][ C0] ? acpi_subsystem_init+0x133/0x180 [ 292.178119][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 292.178143][ C0] start_kernel+0x3f6/0x4e0 [ 292.178179][ C0] x86_64_start_reservations+0x18/0x30 [ 292.178216][ C0] x86_64_start_kernel+0x130/0x190 [ 292.178253][ C0] common_startup_64+0x13e/0x148 [ 292.178286][ C0]